Re: [patch] ocspcheck: nextUpdate is optional according to RFC 6960

2017-09-05 Thread Bob Beck
Andreas where are you seeing this as being a real issue - who is shipping out OCSP responses without a next update field? On Sat, Sep 2, 2017 at 11:28 AM, Andreas Bartelt wrote: > ocspcheck effectively treats a missing nextUpdate like an error, i.e., it > always provides a

Re: divert_output() without ifa_ifwithaddr()

2017-09-05 Thread Alexander Bluhm
On Tue, Sep 05, 2017 at 12:48:59AM +0200, Alexander Bluhm wrote: > This replaces the call to ifa_ifwithaddr() in divert_output() with > a route lookup to make it MP safe. Only set the mbuf header fields > that are needed. Validate the name input. And here is the same diff for IPv6, remove

don't spam console with pflogd exiting messages, misc cleanup

2017-09-05 Thread Bryan Steele
pflogd(8) currently spams the console on shutdown if syslogd wins the race to die, this logging probably comes from the fact that pflogd was largely based on syslogd. Also, cleanup some missed SIGCHLD handling code that is no longer neccesary, parent will exit when child closes its side of the

Re: iwn: scan 5ghz passive only

2017-09-05 Thread Stefan Sperling
On Tue, Sep 05, 2017 at 04:11:14PM +0200, Stefan Sperling wrote: > An active scan sends probe requests which contain the configured SSID. > The idea is that APs will send probe responses immediately and the > client won't have to wait for a full beacon interval on each channel > in order to find

Re: awk fpecatch() update

2017-09-05 Thread Todd C. Miller
On Tue, 05 Sep 2017 14:22:07 +0800, "Michael W. Bombardieri" wrote: > Oops, I failed to notice it was a local change from revision 1.9. > http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/awk/lib.c.diff?r1=1.8 > =1.9=date=h It is not safe to call stdio from a signal handler, which is the

iwn: scan 5ghz passive only

2017-09-05 Thread Stefan Sperling
If an SSID is configured iwn(4) instructs the firmware to do an active scan. An active scan sends probe requests which contain the configured SSID. The idea is that APs will send probe responses immediately and the client won't have to wait for a full beacon interval on each channel in order to

Re: iwn/iwm/wpi: scanning for 2 vs 5 GHz APs

2017-09-05 Thread Stefan Sperling
On Tue, Sep 05, 2017 at 09:05:18AM +0800, Kevin Lo wrote: > On Sun, Sep 03, 2017 at 09:37:02PM +0200, Stefan Sperling wrote: > > > > Starting out in associated (not down!) state: > > ifconfig iwn0 down; ifconfig iwn0 scan > > shows 2 GHz and 5 GHz APs, whereas just > > ifconfig iwn0 scan > >

[patch] Mention syspatch(8) in afterboot(8)

2017-09-05 Thread Jesper Wallin
Hi, Now when syspatch(8) is available and has been tested for a few months, perhaps mention it in afterboot(8) under the Errata section? Jesper Wallin Index: share/man/man8/afterboot.8 === RCS file:

Re: Routing table update on link state change

2017-09-05 Thread Gerhard Roth
On Tue, 5 Sep 2017 10:47:11 +0200 Martin Pieuchot wrote: > On 04/09/17(Mon) 14:53, Gerhard Roth wrote: > > Hi Martin, > > > > > > On Mon, 4 Sep 2017 14:18:50 +0200 Martin Pieuchot wrote: > > > On 04/09/17(Mon) 13:10, Gerhard Roth wrote: > > > > Hi, > > > >

Re: Routing table update on link state change

2017-09-05 Thread Martin Pieuchot
On 04/09/17(Mon) 14:53, Gerhard Roth wrote: > Hi Martin, > > > On Mon, 4 Sep 2017 14:18:50 +0200 Martin Pieuchot wrote: > > On 04/09/17(Mon) 13:10, Gerhard Roth wrote: > > > Hi, > > > > > > I noticed a problem with the routing table that is easy to reproduce: put > > >

Re: refactoring of pf_find_or_create_ruleset()

2017-09-05 Thread Alexandr Nedvedicky
Hello, On Mon, Sep 04, 2017 at 09:51:29PM +0200, Alexander Bluhm wrote: > On Mon, Sep 04, 2017 at 10:29:01AM +0200, Alexandr Nedvedicky wrote: > > anyway below is the patch, which Hrvoje was testing and it worked for > > him. > > I'd like to get some OK to proceed to commit. > > I think

Re: [vmd] vmctl console hung

2017-09-05 Thread Mike Larkin
On Mon, Sep 04, 2017 at 08:25:51PM -0400, Mikhael Lialin wrote: > Hi i'm running 6.2-current on Lenovo TP x240, > > Installed alpine linux 3.6.2-virt as vmm guest. > > I Faced issue that sometimes vmctl console connection hungs and > reconnection just point me to the thread that output that i'm

Re: awk fpecatch() update

2017-09-05 Thread Michael W. Bombardieri
On Tue, Sep 05, 2017 at 01:27:31PM +0800, Michael W. Bombardieri wrote: > Hello, > > Updated version of awk (Dec 20, 2012) [1] has a simplification > in fpecatch() function. I tried to test this to compare the > error output. Oops, I failed to notice it was a local change from revision 1.9.